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Abstract. We extend the notions of conditioned and controlled invariant 
spaces to linear dynamical systems over the max-plus or tropical semiring. We 
establish a duality theorem relating both notions, which we use to construct 
dynamic observers. These are useful in situations in which some of the system 
coefficients may vary within certain intervals. The results are illustrated by 
an application to a manufacturing system. 



1. Introduction 

The use of geometric-type techniques when dealing with linear dynamical sys- 
tems, following a line of work initiated by Basile and Marro |BM69| and Morse and 
Wonham MW70 , MW7T] , has provided important insights to system-theoretic and 
control-synthesis problems. In particular, this kind of techniques lead to elegant 
solutions to many control problems, such as the disturbance decoupling problem 
and the model matching problem, to quote but a few. To achieve this, a geometric 
approach, using certain linear spaces known as conditioned and controlled invariant 
spaces, has been developed (see |Won85[ [BM91j and the references therein). 

In the classical geometric approach to the theory of linear dynamical systems, the 
scalars belong to a field, or at least to a ring. However, the case where the scalars 
belong to a semiring is also of practical interest. In particular, linear dynamical 
systems with coefficients in the max-plus or tropical semiring, and other similar 
algebraic structures sometimes referred to as "dioids" or "idempotent semirings" , 
arise in the modeling and analysis of some manufacturing systems following the ap- 
proach initiated by Cohen, Dubois, Quadrat and Viot |CDQV85] (a systematic ac- 
count can be found in the book by Baccelli, Cohen, Quadrat and Olsder |BCOQ92] ). 
More recent developments of the max-plus approach include the "network calcu- 
lus" of Le Boudec and Thiran [LTOlj . which can be used to assess certain issues 
concerning the quality of service in telecommunication networks, or an application 
to train networks by Heidergott, Olsder and van der Woude |HOvdW06] . All these 
works provide important examples of discrete event dynamical systems subject to 
synchronization constraints that can be described by max-plus linear dynamical 
systems. 
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Several results from linear system theory have been extended to the max-plus 
algebra framework, such as transfer series methods or the connection between spec- 
tral theory and stability questions (sec |CMQV89|). In view of the potentiality of 
the theory of linear dynamical systems over the max-plus semiring, it is also tempt- 
ing to generalize the geometric approach to these systems, a problem which was 
raised by Cohen, Gaubert and Quadrat in |CGQ99| . However, this generalization is 
not straightforward, because many concepts and results must be properly redefined 
and adapted. Similar difficulties were already met in the case of linear dynamical 
systems over rings (for which we refer to the works of Hautus |Hau82j and of Contc 
and Perdon [CP94, CP95]), and in the case of linear systems of infinite dimensions 
on Hilbert spaces (see for instance Curtain |Cur86j ). The difficulties are in two 
directions. In the first place, there are algorithmic issues. The concepts of con- 
ditioned and controlled invariant subspaces (or submodules) are no longer dual, 
and the convergence of the algorithms of the geometric approach is not guaranteed. 
Then, the computation of these spaces may be difficult or impossible in general. 
In the second place, the connection between invariance and control or estimation 
problems is more difficult to establish. Hypothesis must be added to overcome 
these problems. 

In this paper, we show that some of the main results of the geometric approach 
do carry over to the max-plus case. A first work in this direction was developed by 
Katz |Kat07j . who studied the (A, B)-invariant spaces of max-plus linear systems 
providing solutions to some control problems. The max-plus analogue of the distur- 
bance decoupling problem has been studied by Lhommeau et al. [LHC031 ILho03j 
making use of invariant sets in the spirit of the classical geometric approach. More 
precisely, principal ideal invariant sets were considered, which is an elegant solution 
to the algorithmic issues, leading to effective algorithms at the price of a restrictive 
assumption. However, these works differ from [Kat07j in the fact that they are 
based on residuation theory and transfer series techniques. 

The present paper is devoted to studying the max-plus analogues of conditioned 
and controlled invariance and the duality between them. In the classical linear 
system theory, conditioned invariant spaces are defined in terms of the kernel of 
the output matrix. In the semiring case, the usual definition of the kernel of a 
matrix is not pertinent because it is usually trivial. In their places, we consider a 
natural extension of kernels, the congruences, which are equivalence relations with 
a semimodule structure (see |CGQ96| |CGQ97| IGK0 8 ). Instead of considering, for 
instance, situations in which the perturbed state x' of the system is the sum of 
the unperturbed state x and of a noise w, we require the states x and x' to belong 
to the same equivalence class modulo a relation (congruence) which represents the 
perturbation. Indeed, in the max-plus setting, considering only additive pertur- 
bations would be an important restriction, because adding only means delaying 
events, whereas congruences allow us to model situations in which the perturbation 
drives some events to occur at an earlier time. 

By a systematic application of these ideas, we generalize the main notions of the 
classical geometric approach. However, this generalization raises new theoretical as 
well as algorithmic issues, because we have to work with congruences (sets of pairs 
of vectors), rather than with linear spaces (sets of vectors), leading to a general 
"doubling" of the dimension. 
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Considering max-plus linear systems subject to perturbations modeled by con- 
gruences actually leads to an extension of the modeling power of the max-plus 
approach, allowing one to take certain classes of constraints or uncertainties into 
account. For instance, we show that max-plus linear dynamical systems with uncer- 
tain holding times can be modeled in this way, if these times arc assumed to belong 
to certain intervals. For this kind of perturbed systems, the minimal conditioned 
invariant space containing the perturbation can be interpreted as the "best infor- 
mation" that can be learned on the state of the system from a given observation 
and initial state. Our final result (Theorem [3]) shows that this "optimal informa- 
tion" on the perturbed state of the system can be reconstructed from the output 
by means of a dynamic observer. 

In order to compute this dynamic observer, we extend to the max-plus alge- 
bra framework the classical fixed point algorithms used to compute the minimal 
conditioned invariant and the maximal controlled invariant spaces containing and 
contained, respectively, in a given space. Our main result, Theorem [2] establishes 
a duality between conditioned and controlled invariant spaces. This allows us to 
reduce the computation of minimal conditioned invariant spaces to the computa- 
tion of maximal controlled invariant spaces, and in this way to reduce algorithmic 
problems concerning congruences to algorithmic problems concerning semimodules, 
which are easier to handle. Thus, this duality theorem solves the previously men- 
tioned algorithmic difficulties related to the "doubling" of the dimension. Then, 
Proposition [5] identifies conditions which guarantee that the fixed point algorithm 
used to compute the minimal conditioned invariant congruence containing a given 
congruence terminates in a finite number of steps. Its proof is based on a finite 
chain condition, which is valid thanks to the finitcness and integrity assumptions 
made in the proposition. Under more general circumstances, the max-plus case 
shows difficulties which seem somehow reminiscent of the ones encountered in the 
theory of invariant spaces for linear systems over non-Nocthcrian rings. Recall that 
the computation of such spaces is still an open problem in the case of general rings. 

This paper is organized as follows. The next section is devoted to recalling ba- 
sic definitions and results on max-plus algebra which will be used throughout this 
paper. In Section [3] we introduce the max-plus analogues of conditioned and con- 
trolled invariant spaces and extend to the max-plus algebra framework the classical 
fixed point algorithms used for their computation. Duality between conditioned 
and controlled invariance is investigated in Section [5] but previously, in Section [H 
it is convenient to introduce the notions of orthogonal of semimodules and con- 
gruences and study their properties. Finally, in Section [6l we illustrate the results 
presented here with their application to a manufacturing system. 

2. Preliminaries 

The max-plus semiring, R ma x, is the set RU {— oo} equipped with the addition 
(a, b) t— > max(a, b) and the multiplication (a, b) i— > a + b. To emphasize the semiring 
structure, we write a © b := max(a, b) and ab := a + b. 

For p, q G N, we denote by the set of all p times q matrices over the 

max-plus semiring. As usual, if E G R^iax; denotes the element of E in its 
i-th row and j'-th column, and E l G K^lx the transposed of E. The semiring 
operations are extended in the natural way to matrices over the max-plus semiring: 
(E © F)ij := Eij © Fij, {EF) t j := ® k E ik F kj and {XE)^ := XE tJ for all i, j, where 
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E and F are matrices of compatible dimension and A £ R m ax- For E £ R„ lax , we 
denote by liaE := {Ex | x £ B^ nax } the image of E. Wc usually denote by e := — oo 
the neutral clement for addition as well as the null matrix of any dimension. 

Wc equip R max with the usual topology which can be defined by the metric: 
d(a,b) := exp(a) — cxp(b)|. The Cartesian product R^ax i s equipped with the 
product topology. Note that the semiring operations arc continuous with respect 
to this topology. 

The analogues of vector spaces or modules obtained by replacing the field or 
ring of scalars by an idempotent semiring arc called semimodules or idempotent 
spaces. They have been studied by several authors with different motivations (see 
for example |Zim771 IMS921 IGK951 ILMS011 |CGQ04| ). Here, we will only consider 
subscmimodules of the Cartesian product E" ax , also known as max-plus cones, 
which arc subsets /C of R2 iax stable by max-plus linear combinations, meaning that 

Xx © fiy £ JC 

for all x,y £ K, and A, fi £ M max . Wc denote by span S the smallest semimodule 
containing a subset S of R™ lax . Therefore, span S is the set of all max-plus linear 
combinations of finitely many elements of S. A semimodule /C is said to be finitely 
generated, if there exists a finite set S such that /C = span S, which also means 
that K. = Im E for some matrix E. We shall need the following lemma. 

Lemma 1 ( BSS07, GK07]). Finitely generated sub semimodules o/R^ ax are closed. 

A congruence on R™ ax is an equivalence relation W C (R" nax ) 2 on R™ ax which has 
a semimodule structure when it is thought of as a subset of (R" ax ) 2 . Congruences 
can be seen as the max-plus analogues of kernels of the classical theory: due to the 
absence of minus sign, given a matrix E £ R^ ax , it is natural to define the kernel 
of E (see |CGQ96[ [CGQ971 ) as the congruence 

kevE:={(x,y)£(R^f\ Ex = Ey} . 

The usual definition her E := {x £ R„ lax | Ex = e} is not convenient in the 
max-plus algebra case, because this semimodule is usually trivial even if E is not 
injective, so it carries little information. If A £ RJj lax is a matrix and W C (M^ ax ) 2 
is a congruence, we define 

AW := {(At, Ay) £ (M» ax ) 2 | (x,y) £ W} 

and 

A-*W := {(x,y) £ (RLJ 2 | (Ax, Ay) £ W} . 

Observe that AW is not necessarily a congruence even if W is. For S C K™^, we 
define as usual 

AS := {Ax £ R™^ x £ S} and A~ 1 S := {x £ R™^ | Ax £ S} . 

In the sequel, if W is a congruence, we write x ~yv y for (x, y) £ W and denote by 
[x]w the equivalence class of x modulo W. 

3. Max-plus conditioned and controlled invapjance 
We consider max-plus dynamical systems of the form 

!x(k + 1) ~ v Ax{k) 
y(k) = Cx(k) 
x{0) = x 
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where A G R™*™, C G R^*™, ac € R£ iax is the initial state, x(k) G R" ax is the 
state, y(k) G R^ax i s the output and V C (R" ax ) 2 is a congruence which represents 
unobscrvablc perturbations of the max-plus linear system x(k + l) = Ax{k). Hence, 
the dynamics in ((T|) is multi-valued, meaning that several values of x{k + 1) are 
compatible with a given x{k). We assume that the output y(k) is observed. 

If V = keri? for some matrix E, then x(k + 1) ~v Ax{k) is equivalent to 
Ex{k + 1) = EAx(k), so x i— > -Ex may be interpreted as an invariant which must 
be preserved by the perturbation. Hence, system (TTJ) might be viewed as an im- 
plicit linear system. In classical system theory, implicit systems are often used to 
represent systems subject to disturbances. 

In Section [5] we will show that dynamical systems of the form (fTJ) can be used, 
for instance, to model max-plus linear dynamical systems of the form 

x(k + 1) = Ax(k) , 

when some entries of A arc unknown but belong to certain intervals. 

The analogy between congruences and classical kernels leads us to the following 
definition. 

Definition 1 (Conditioned Invariant). Given A G R^a™ an d C £ R£j a congru- 
ence W C (RJJ lax ) 2 is said to be (C, A) -conditioned invariant if 

(2) A(WnC)cW, 

where C := kcrC. 

The following proposition establishes the connection between conditioned invari- 
ants and the observation problem for dynamical systems of the form ([T]). 

Proposition 1. Let W be a congruence containing the perturbation V. Then, 
W is (C, A) -conditioned invariant if, and only if, for any trajectory {x(k)} k>a of 
system ((T|) and any m G N, the equivalence class of x(m) modulo W is uniquely 
determined by the equivalence class of x(0) modulo W and by the observations 
y(0),...,y(m-l). 

Proof. Assume that W is (C, A)-conditioncd invariant. Let x(k + 1) ~y Ax(k) and 
x'(k+l) ~v Ax'{k). Then, if x{k) ~w x'{k) and y{k) := Cx{k) = y'{k) := Cx'(k), 
we have (x(k),x'(k)) G W n C, and so (Ax(k), Ax'(k)) G 4(WnC) C W because 
W is (C, ^-conditioned invariant and C = kerC. Therefore, Ax(k) Ax'(k), 
and since W D V, we deduce that x{k + 1) ^>v x'(k + 1). The "only if" part of the 
proposition follows from an immediate induction. 

Conversely, assume that for any trajectory {x(k)} k>Q of system ([!} the equiv- 
alence class of x{m) modulo W is uniquely determined by the equivalence class 
of .t(0) modulo W and by the observations. Let (x(0),x'(0)) G W H C. Then, if 
x(l) ~y ^4a;(0) and x'(l) ~y At'(O), we have x(l) x'(l) because x(0) ^'(0) 
and y(0) := Cx(0) = y'(0) := Cx'(0). Therefore, it follows that Ax(0) ~ w Ax'(0) 
because V C W. Since this holds for any (x(0), x'(0)) G W H C, we conclude that 
A(W l~l C) C W, which proves the "if" part of the proposition. □ 

This proposition raises, for observation purpose, the question of the existence, 
and the computation when it exists, of the minimal (C, ^-conditioned invariant 
congruence containing V. Like in the case of coefficients in a field, the following 
lemma can be easily proved. 
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Lemma 2. The intersection of(C, A) -conditioned invariant congruences is a (C, A)- 
conditioned invariant congruence. 



If we denote by Jz?(C, A, V) the set of all (C, ^-conditioned invariant congruences 
containing a given congruence V, then, as a consequence of the previous lemma, it 
follows that -Sf (C, A, V) is a lower semilattice with respect to C and n. Moreover, 
Lemma [2] also implies that -£?(C, A, V) admits a smallest element, the minimal 
(C, A)-conditioned invariant congruence containing V, which will be denoted by 
V*(C, A). 

In order to compute V*(C, A), we extend the classical fixed point algorithm 
(see t BM69, BM91, Won85 ) to the max-plus algebra framework. With this purpose 
in mind, consider the self-map ip of the set of congruences given by 

(3) ip(W) := (VffiA(WnC)) , 

where (U) denotes the smallest congruence containing the set U C (R^ ax ) 2 . Note 
that WcW implies ip(W) C tp(U). Define the sequence of congruences {Wfe} fcgN 
by: 

(4) Wi := V and W k+1 := V(W fc ) for k e N . 

Then, this sequence is (weakly) increasing, that is, W k C Wfc+i for all k 6 N. As 
a matter of fact, Wi = V C V © A(Wi flC)c (Vffl A(Wi n C)) = W 2 and if 
W r C Wr+i, then W r+ i = tp(W r ) C 4>{W r+ i) = W r +2- We define Voo as the limit 
of the sequence {Wfe} fcgN , that is, Voo = UigjjWfc. Note that Voo is a congruence, 
because {Wfc} fegN is an increasing sequence of congruences. 

Proposition 2. Lei V C (K^ ax ) 2 6e a congruence. Then, Voo is i/ie minimal 
(C , A) -conditioned invariant congruence containing V. 

Proof. Let W C (R™^) 2 be a (C, A)-conditioned invariant congruence containing 
V. We next show that W k C W for all fceN, and therefore Voo C W. In the first 
place, note that Wi = V C W. Assume now that W r C W. Then, as A(WnC) C W 
and V C W, it follows that W r+1 = tp(W r ) C V(W) = (V® A(WnC)) C (W) = W. 

To prove that V*(C, A) = V^, it only remains to show that Voo is (C,A)- 
conditioncd invariant. Since 

^(Voonc) = A((u fe w fe )nc) = A(u k (w k nc)) - u k (A{w k nc)) c u fc w fe+1 = Voo , 

it follows that Voo is a (C, A)-conditioned invariant congruence. □ 

Concerning the computation of V*(C, A), Proposition [5] presents two drawbacks 
in relation to the classical theory. In the first place, for linear systems over fields, the 
sequence {W^l^g^ always converges in at most n steps because it is an increasing 
sequence of subspaccs of a vector space of dimension n. However, in the max-plus 
case, this sequence does not necessarily converge in a finite number of steps (see 
the example below). This difficulty is mainly due to the fact that (R^ ax ) 2 is not 
Noctherian, meaning that there exist infinite increasing sequences of subsemimod- 
ulcs of (R^ ax ) 2 . The second difficulty comes from the fact the V © A(W k n C) need 
not be a congruence, so it is necessary to compute (V © A(W k (~l C)). However, the 
duality results established in the present paper will allow us to dispense with this 
operation. 
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Example 1. Consider the matrices 

A = (e l) and ^ = ( e £ ) ' 

and the congruence V C (l^) 2 defined by: x ~y 2/ if, and only if, x\ = y\ and 
x\® X2 = yi © yi- In order to determine the minimal (C, A)-conditioned invariant 
congruence containing V, we next compute the sequence of congruences {Wfc} fcgN 
defined in and ([!]). We claim that Wk is defined as follows: x ~yv fc V if, and 
only if, x\ = y\ and (fc — ®X2 = (k— ©2/2- In the first place, note that this 
property is satisfied by definition for k = 1. Assume now that it holds for fc = to. 
Note that 

x\ = yi and (to - l)xi © x 2 = (to - l)yi © 2/2 

is equivalent to 

fci = 2/1, (m - > %2, (m - l)y 1 > y 2 ) or {x\ = yi, x 2 = 2/2) • 
Then, in this particular case AW m is a congruence which is defined by 

x ~aw„ 2/ O&i = yumx-L > x 2 ,my 1 > y 2 ) or (xi = yi,x 2 = 2/2) 
and thus 

W ro+ i = ^(W m ) = (V © A{W m n C)} = (V © AWm) = (AW m ) = AW m 

because C = kerC = (R^ ax ) 2 and V C AW m . This proves our claim. 
Therefore, V*(C, A) = Voo is the congruence defined as follows: 

x ~Voo y <=> [xi = 2/1 ^ e) or (a?i = 2/1 = e, £2 = 2/2) ■ 

Note that V*(C, A) = Voo is not closed even if V is closed. For instance, if Ai 7^ A2, 
we have 

(-fc,Ai)*~ v . (-*,A 2 )* 
for all fc G N, but (e, Ai) V Voc ( e > A a)*- 

For linear systems over fields, the minimal (C, A)-conditioned invariant space 
containing a given space can be alternatively computed through the notion of con- 
trolled invariance, which is dual of the notion of conditioned invariance. In the 
max-plus case, this dual notion can be defined as follows. 

Definition 2 (Controlled Invariant). Given A <E E™^ and B e i™^, a semimod- 
ule X C Kmax * s sa ^ t° be (A, B)- controlled invariant if 

(5) AX cA'ffiB, 
where B := JmB and X ®B := {x®b \ x e X,b <E B}. 

Remark 1. From a dynamical point of view, the interpretation of (A, i?)-controlled 
invariance differs from the classical one. For linear dynamical systems over fields 
of the form 

(6) x(k + 1) = Ax{k) + Bu(k) , 

where x(k) is the state, u{k) is the control, and A and B are matrices of suitable di- 
mension, it can be shown (see |BM91[|Won85| ) that X is (A, i?)-controlled invariant 
if, and only if, any trajectory of ([6|) starting in X can be kept inside X by a suitable 
choice of the control. However, due to the non-invertibility of addition, this is no 
longer true in the max-plus case. For this property to hold true, in Definition [2] the 
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semimodule X ffi B must be replaced by X ffi B := {z G R™ ax | 3b G B, z ffi b G X} 
(see [Kat07j for details). 

The proof of the following simple lemma, which is dual of Lemma is left to 
the reader. 

Lemma 3. The (max-plus) sum of (A, B)- controlled invariant semimodules is 
(A, B)- controlled invariant. 

By Lemma [3] the set of all (A, _B)-controllcd invariant semimodules contained 
in a given semimodule JC C IJJ,^, which will be denoted by ^(A, B,IC), is an 
upper semilattice with respect to C and ffi. In this case, ^M{A, B, /C) admits a 
biggest element, the maximal (A, _B)-controlled invariant semimodule contained in 
/C, which will be denoted by K*(A, B). 

In order to compute IC*(A, B), consider the self-map 4> of the set of semimodules 
defined by: 

(7) <j){X) :=)CnA- 1 (X®B) . 
Define the sequence of semimodules {X k } keN as follows: 

(8) X x := K. and X k+l := <j){X k ) for k G N . 

Note that {X k } k£N is (weakly) decreasing, that is, X k+ \ C X k for all k G N. As a 
matter of fact, X 2 = 0(A?i) = K n A~ 1 (X 1 © B) C K. = X\ and if X r+ i C X r , then 
X r +2 = (j>(X r+ i) C 4>{X r ) = X r+ i, since 4>(Z) C 4>(y) whenever Z c y. We define 
the semimodule /C°° as the limit of the sequence {Xk} keN , that is, /C°° — Dk^Xk- 

Lemma 4. Any (A, B) -controlled invariant semimodule contained in K, is contained 
in /C°°. In particular, K,*{A,B) C K.°° . 

Proof. Let X be an (A, i?)-controllcd invariant semimodule contained in /C. Wc next 
prove (by induction on k) that X C Xk for all fceM, and thus X C /C°° . In the first 
place, note that X C K = X\. Assume now that X C X r . Then, as AX C X © B 
and A? C K, it follows that -Y C K H A" 1 (AT © B) = <p(X) C 0(A;) = A^ +1 . □ 

In the sequel, we will repeatedly use the following elementary observation. 

Lemma 5. If X and y are closed sub semimodules o/R^ lax , then so is X ®y. 

Proof. Let {zfc} fcgN denote a sequence of elements of X ffi y converging to some 
z S I^max- Then, we can write z fe = x fc ffi y k with x k 6 X and yk £ y for k G N. 
Since {-2fe} fcgN is bounded, {a:fe} fcgN and {y k } keN must be bounded, and so, by taking 
subsequences if necessary, we may assume that {a;fc} fcgN and {y k } kG ^ converge to 
some vectors x and y, respectively. Since X and y are closed, we have x G X and 
y G y, and so, z = x ffi y G A" ffi ^. □ 

In order to state a dual of Proposition^ wc shall need a topological assumption. 

Proposition 3. Let K, C R„ lax be a closed semimodule. Then, /C°° is the maximal 
(A, B)- controlled invariant semimodule contained in K. 

Proof. By Lemma HI it suffices to show that /C°° is (A, i?)-controlled invariant, 
that is, AK°° C /C°° ffi B. With this aim, as A/C°° = A{C\ k X k+1 ) c n k AX k+ i c 
n^Affc ffi B), it is enough to prove that n k (X k © B) C (RfcA^) ffi 6 = /C°° ffi 6. 

In the first place, note that by Lemma [5l <fi(X) is closed whenever X and K. are 
closed, because B is closed by Lemma Q] Then, the semimodules X k are all closed 
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since /C is closed. If x E C\k{Xk®B) , there exist sequences {frfc} fegN and {xk} kGf j such 
that x = Xk © bk, Xk 6 Xk and bk & B for all k E N. As these sequences are bounded 
by x, we may assume, by taking subsequences if necessary, that there exist y E Rn iax 
and b E B such that lim^oo Xk = y and lim^oo bk = b (recall that B is closed 
by Lemma [T]). Then, as the sequence {Xk} keN is decreasing and the scmimodules 
Xk are all closed, it follows that y = lim/^oo Xk E X r for all r E N. Therefore, 
y E C\ k X k = /C°° and x = lim fe ^ 00 (a;fe @b k ) = (lim/^oo x k ) © (lim/^oo 6 fe ) = y®b E 
/C°° © £. □ 

Observe that, by Lemma[TJ the condition of the previous proposition is in partic- 
ular satisfied when K. is finitely generated. Note also that K,*(A, B) = /C°° is closed 
if K, is closed, because in that case /C°° is an intersection of closed scmimodules 
(recall that in the previous proof we showed that the semimodules Xk are all closed 
when K. is closed). 

Like in the case of the sequence of congruences {Wfc} fceN , and unlike the case of 
coefficients in a field in which it converges in at most n steps (sec [BM69, BM91, 
IWon85j ). the sequence of semimodules {X k } k£N does not necessarily converge in a 
finite number of steps (see the example below). This is in part a consequence of 
the fact that R^ax ^ s n °t Artinian, meaning that there exist infinite decreasing se- 
quences of subsemimodules of R" lax - However, in Section [5] we will give a condition 
which ensures the convergence of this sequence in a finite number of steps. This 
difficulty is also found when the coefficients belong to a ring, where except for Prin- 
cipal Ideal Domains, the computation of the maximal (A, i?)-controlled invariant 
module is still under investigation (see |CP94| ICP95j ). 

Example 2. Consider the matrices 

A=(° and B U 



£ lj \£ 

and the semimodule K. = {x E K^ lax | x\ > x 2 }- Since K. is clearly closed, we can 
apply Proposition [3] in order to compute IC*(A, B). If we define the sequence of 
semimodules {X k } k£N by ([7]) and ([5]), then, using the fact that in this particular 
case A is invcrtiblc and that 

'0 e 
-1, 



A- 1 



it can be easily seen that Xk — {x E Rmax | x± > (k — 1)^2} for all k E N. 
Therefore, K*{A, B) = /C°° = {x E R^ ax | x 2 = e}. 

4. Orthogonal semimodules and congruences 

Before studying the duality between controlled and conditioned invariance, it is 
convenient to introduce the notions of orthogonal of semimodules and congruences, 
and study their properties. 

Definition 3. The orthogonal of a semimodule X C R„ lax is the congruence 
X 1 - = {(x,y) E (R^ ax ) 2 I x f z = y t z,\/z E X}. Analogously, the orthogonal of 
a congruence (or more generally a semimodule) W C (R" ax ) 2 is the semimodule 
W T = {ze R' n \ ax I x*z = tfz,V{x,y) G W}- 

Note that the orthogonal, being the intersection of closed sets, is always closed. 
We shall need the following duality theorem. 



Theorem 1. If X C B^ ax is a closed semi-module, and i/WC (l^) 2 is a closed 
congruence, then: 

X = {X^) T , and W = (W T ) ± . 

The first equality follows from the separation theorem for closed semimodules, 
see |Zim771 Th. 4], [5592] . see also |CGQS05] Th. 3.14] for recent improvements. 
The second equality is proved in [GK08] as a consequence of a new separation 
theorem, which applies to closed congruences. 

The orthogonal has the following properties. 

Lemma 6. Let A G R^ax be a matrix, W, Wi, W 2 C (M" ax ) 2 6e congruences and 
X,X\,X 2 C l"a X ^ e semimodules. Then, 

(i) (Wi © W 2 ) T = W7 n Wj and {Xi © <v 2 )- L = a^ n a^ , 

(ii) {AW) T = (A*)- 1 W T and (AX) X = (A^X 1 - . 
Moreover, i/Wi, W 2; A\ a^rf X2 are closed, then 

(iii) (Wi n W 2 ) T = Wj 7 ffi W 2 T and (A^ n A^)" 1 = A"/- © A^ . 

Proof. We next prove these properties for congruences. In the case of semimodules, 
these properties can be proved along the same lines. 

(i) As W r C Wi © W 2 for r = 1, 2, we have (Wi © W 2 ) T C W r T for r = 1, 2 and 
thus (Wi © W 2 ) T C Wj n W 2 T . 

Let z G W7 n W 2 T . Since 

(«i © x 2 )*z = a:*^ © x\z = y\z © y\z = (yi © y 2 )*z 
for all (2:1,2/1) G Wi and {x 2 ,y 2 ) G W 2 , it follows that z G (Wi © W 2 ) T . Therefore, 

w7 n wj c (Wi © w 2 ) T . 

(ii) We have 

(AW) T = {z G JC* I ar** = y'z, V(ar, y) G AW} 

= {z G 1C, I (Ar)*« = (^)'z, V(x, y) G W} 

= {z G M^ ax I a*A*z = y'Ah, V(x, y) G W} 

= {z G 1C I A'z G W T } = (A t )~ 1 W T . 

(iii) Since Wi and W 2 are closed, by Theorem Q] we have Wi = (Wj 7 ) -1 and 
W 2 = (W 2 T ) ± . Then, from (i) and Theorem[fl it follows that 



(Wi n W 2 ) ' = ((w; )^ n (W a ' ) x ) ' = ((w; © w 2 T )- L ) T = >v7 © W. 



2 - 



because © is closed by Lemma [5] □ 

In Property (iii) above, when the semimodules X\ and X 2 are not closed, the 
only thing that can be said is that 

As a matter of fact, since X\C\X 2 C A" r for r = 1, 2, it follows that X L C [X\ fl A^) 1 - 
for r = 1,2 and so © A^ C (Af x n X 2 ) x . To see that the other inclusion does 
not necessarily hold, consider the semimodules X\ — {x G | xi = x 2 } and 

X 2 = {x G K^ ax I an > a; 2 } U {(e,£) 4 }. Then, A^ = G (R 2 lax ) 2 | xi © x 2 = 

yiffiy 2 } and A^ = {(x,y) G (RLx) 2 I &i = Vi,xi®x 2 = yiffiy 2 }, thus A^ffiA^ = 
X x £ (M 2 na x) 2 because C A^. However, (A"i n A^) 1 - = {(e^)*}^ = (MLx) 2 - 
Lemma 7. For any matrix E we have (ImE) 1 - = ker E* and (ker E) T = ImE 1 . 
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Proof. Note that (x,y) € (ImE) x x t z = y t z,\fz e ImE ^==> x t Ev = 

y l Ev,~iv <^=^ E t x^E t y (x, y) E kcr E* . Therefore, (ImB) 1 = ker E f . 

Since by Lemma[I]Im_B' is closed, we have ((Imi? t )- L ) T = Im Then, as 
(ImE 1 *)- 1 = kcrS, it follows that (kcr£;) T = Im E l . □ 

5. Duality between conditioned and controlled invariance 

In this section we investigate the duality between controlled and conditioned 
invariants in max-plus algebra. 

Lemma 8. If X C Kl™ lax is (A , B)- controlled invariant, then X is (i? 4 ,^*)- 
conditioned invariant. Moreover, if a closed congruence W C (R™ ax ) 2 is (C,A)- 
conditioned invariant, then W T is {A 1 , C 4 )- controlled invariant. 

Proof. If X is (A, ^-controlled invariant, then AX C X © ImB. Since 

AXcX(BlmB => (A" ©ImB) 1 - C (AX) 1 - 

=> X 1 - n (ImB) 1 - C (A t )~ 1 X 1 - 

=> ^(A- 1 nkerB*) C A- 1 , 

it follows that A"- 1 - is (B t , A*)-conditioncd invariant. 

Assume that a closed congruence W is (C, A)-conditioned invariant, that is 
A(W n kcrC) C W. Then, by Lcmma|we have (W n kcrC) T = W T © (kerC) T 
and thus 

A(W n kcr C) C W W T C (^(WnkerC)) T 

=> W T C (A t )- 1 (WnkcrC) T 

A*W T C (W n kcr C) T = W T © Im C* . 
Therefore, W T is (^4*, C*)-controllcd invariant. □ 

The following duality theorem establishes a bijective correspondence between 
closed controlled invariant semimodules and closed conditioned invariant congru- 
ences. This is the basis of the algorithmic results which follow, since dealing with in- 
variant semimodules is technically simpler than dealing with invariant congruences 
(because, in particular, the later objects show a "doubling" of the dimension). It is 
worth mentioning that for systems with coefficients in a ring the duality between 
controlled and conditioned invariant modules docs not hold in general [DLLL08] . 
For systems in infinite dimensions on a Hilbert space as well, closeness is instrumen- 
tal for obtaining duality results [Cur86j . In this case other hypothesis arc necessary 
concerning the domain of the operators and their boundedness. 

Theorem 2 (Duality theorem). Let V C (K" ax ) 2 be a congruence. If W is a closed 
congruence, then 

We£f{C,A,V) W T g .£{A\C\V T ) . 

Proof. If the congruence W is (C, ^-conditioned invariant and closed, then, by 
Lemma[51 W T is (A*, C^-controllcd invariant. Moreover, if W D V, it follows that 
W T C V T . This shows the "only if" part of the theorem. 

Conversely, if X := W T is (A 1 , C*)-controlled invariant, then, by Lemma 
X is (C, ^-conditioned invariant. Moreover, if W is closed and X C V T , then 
W = (W T ) ± = X 1 - D (V T )^ D V, which shows the "if" part of the theorem. □ 
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As a consequence, we have. 
Proposition 4. Let V C (R" lffl ) 2 be a congruence. If we define JC = V T , then 
JC*(A t ,C t ) ± is the minimal closed (C, A) -conditioned invariant congruence con- 
taining V. Therefore, V*(C,A) C JC*(A\ and V*(C,A) = JC*(A\ C*) 1 " i/ 
V* (C, A) is closed. 

Proof. By Lemma [3] we know that JC* (A* , C t )' L is (C, A)-conditioned invariant. 
Moreover, since JC*{A\ &) C /C, we have V C (V T ) ± = JC 1 ^ C /C*(A*, C*)^. 

Let W be a closed (C, ^-conditioned invariant congruence containing V. Then, 
by Thcorcmd we have W T £ Jt{A\C\ JC) and thus W T C /C*(A*, C*). Therefore, 
JC*(A t ,C t ) ± C (W T ) ± = W. □ 

Since in the previous proposition JC — V T is closed, we can apply Proposition [3] 
in order to compute JC*{A t ,C t ). This means that in (JT)) and |8]) we have to take 
JC = V T , B = C* and A* instead of A. 

Example 3. Consider again the matrices A and C and the congruence V of Exam- 
ple [TJ We have seen that in this case V*(C, A) is not closed. Taking JC = V T , by 
Proposition |U we know that JC*(A t ,C t ) 1 ~ is the minimal closed (C, A)-conditioned 
invariant congruence containing V. Note that V = kerE, where 

'0 

,0 0, 



E = 



so that JC = Im E* is the semimodule considered in Example [2J Since A = A 1 
and the matrix B of Example [5] is equal to C*, /C*(A*,C*) is the semimodule 
JC*(A, B) = {x G Mmax I ^2 = e} computed in Example O Therefore, we conclude 
that the minimal closed (C, A)-conditioned invariant congruence containing V is 

/c*(a*,c*) ± = {(x, 2/ )g(kLx) 2 I xi = vi}- 

We say that a congruence W is cofinitely generated if W = ker E for some matrix 
E. Since a congruence W on M™ ax is in particular a subsemimodule of (R™ ax ) 2 , 
we say that W is finitely generated if it is finitely generated as a semimodule, that 
is, if there exists a finite family {(xi,yi)} ieI C (ljj, ax ) 2 such that W is the set of 
elements of the form ® ieJ A,:(xi, yj, with Xi £ M max - We next show that the class 
of cofinitely generated congruences coincides with the class of finitely generated 
congruences. With this aim, we shall need the following lemma, which tells us that 
the solution sets of homogeneous max-plus linear systems of equations are finitely 
generated semimodules. 

Lemma 9 ( [BH841 Gau92j ). If F and G are two rectangular matrices of the same 
dimension, then, {z \ Fz = Gz} is a finitely generated semimodule. 

Lemma 10. A congruence W is cofinitely generated if, and only if, it is finitely 
generated as a semimodule. 

Proof. If W = kerE, then, it is finitely generated as a semimodule, because VV = 
{(x,y) | Ex = Ey} is the solution set of an homogeneous max-plus linear system 
of equations, which is finitely generated as a semimodule by the previous lemma. 

Conversely, if W is finitely generated as a semimodule, then it is closed, and so 
W = (W 1 ^) 1 - by Theorem [TJ Using again the previous lemma, we deduce that W T 
is a finitely generated semimodule, so W T = ImG for some matrix G. It follows 
that W = (ImG) 1 = kerG* is cofinitely generated. □ 
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In practice, the objects of interest are usually finitely generated congruences 
and semimodulcs. This is why, in the sequel, we focus our attention to them and 
consider the following sets 

M g (C, A, V) = {W G Jzf (C, A, V) | W = ker D for some matrix D} 

and 

JZtz{A, B, K) = {X G JZ(A, B,K)\ X = ImD for some matrix D} . 

The following theorem relates -S?f g (C, A, V) with .M^A 1 , C*, V T ). 

Theorem 3. Let V C (ljj, ax ) 2 be a congruence. If we define K, = V T , then 
J£f s (C,A,V) admits a minimal element Vf g (C, A) if, and only if ^#f g (A* , C* , K) 
admits a maximal element /C fs (A 4 , C'). Moreover, when these elements exist, they 
satisfy V fg (C, A) = /C fg (A*, C")- 1 . 

Proof. In the first place, note that 

ker Di C ker D 2 Im D\ C Im D* , 

since kcrDi C kerD 2 ==>■ (kcrD 2 ) T C (kcrDi) T ImD 2 C ImD* and 

ImD! C ImDf => (ImflJ) 1 C (ImD^) 1 =*> kerDi C kcrD 2 by Lemma E 
In addition, by Theorem [5] we know that W = kerD 6 Jz?f g (C, A, V) if, and only if, 
X = ImD* G ,/#f g (A*, C*, /C). Therefore, Jz?f g (C, A, V) admits a minimal element 
Vf g (C,A) if, and only if, JZ^A 1 , C", /C) admits a maximal element /C fg (A*, C*). 
Moreover, if V fg (C, A) exists and V fg (C, A) = kerD, then /C fg (A*, C") = ImD* and 
thus V fg (C, A) = /C f s(A', C*) x . □ 

We next give a condition which ensures the existence of Vf g (C, A). With this aim, 
it is convenient to restrict ourselves to the subsemiring Z max = (ZU {— oo}, max, +) 
of M m ax and introduce the notion of volume of a subsemimodulc of Z™ ax . 

Definition 4. Let K, C Z^ ax 6e a semimodule. We call volume of K,, and we 
represent it with vol(/C), the cardinality of the set {z G /C | z\ © • • ■ © z n = 0}. 
Moreover, if E G Z" a £, we represent with vol(D) i/ie volume of the semimodule 
K = ImD, i/iat is, vol (D) = vol (ImD). 

Note that a semimodule /C C ZJ^ ax with finite volume is necessarily finitely 
generated because clearly K, = span {z G K, \ z\ • • • © z n = 0}. We shall need the 
following properties. 

Lemma 11 ([Kat07])- Let E G ZJJ^p fee a matrix and Z, y C Z" ax &e semimodulcs. 
Then, we have 

(i) ycZ4 vol (3>) < vol (Z) , 

(ii) i/ vol (y) < oo, then y £ Z vol < vol (Z) , 

(iii) vol(D) = vol(D') . 

Proposition 5. Lei A G Z^*™, C G Z?*™ and V = kerD, w/iere D G Zg££ is 
a matrix with finite volume. Then, Vf g (C, A) exists. Moreover, if we define the 
sequence {Afc} fegN by with K, = V , B = C* and A* instead of A in 0, then 
V fg (C, A) =X r J - for some r < vol (D) + 1. 
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Proof. Firstly, note that by Property (iii) of Lcmma[TT]we have vol (X\ ) = vol (JC) = 
vol (E*) = vol {E) < oo. Then, since {Afc} fegN is a decreasing sequence of semimod- 
ulcs, from Property (i) of Lemma QT] we deduce that {vol (Afc)} fcgN is a decreas- 
ing sequence of non- negative integers. Therefore, there exists r < vol(Ai) + 1 = 
vol (E) + l such that vol (<Y r +i) = vol (X r ), so by Property (ii) of LemmafTTl we have 
X r+1 = X r . It follows that X k = X r for all k > r and thus IC*(A t , C") = /C°° = X r 
by Proposition [3] Finally, since X r has finite volume, and so it is finitely generated, 
we conclude that /C fg (A*, C") = AC* (A*, C*) = «f r and then, by Theorem[3] we have 
V fe (C,A)=^ L . □ 

Remark 2. Note that in the previous proof we in particular showed that when fC has 
finite volume, the sequence {Afc} fcgN defined in ((5J) converges in at most vol (/C) + 1 
steps to IC*(A,B), for any pair of matrices A and J3. 

For sufficient conditions for K- = Imfi to have finite volume, and a bound for 
vol(.E) in terms of the additive version of Hilbert's projective metric when E only 
has finite entries, we refer the reader to |Kat07| . 

To end this section, observe that Proposition[T]raises the question of constructing 
a dynamic observer for system ([1]), allowing us to compute [a;(m)]yv as a function 
of [x(0)]w and 2/(0), . . . , y(m — 1). To do so, we shall assume that the congruence 
W is cofinitely generated, so that W = kerF for some matrix F. Then, we must 
compute Fx(m) in terms of Fx(0) and y(0), . . . , y(m — 1). 

Theorem 4 (Dynamic observer). Assume that the minimal (C, A) -conditioned in- 
variant congruence W containing V is cofinitely generated, so that W = ker F for 
some matrix F. Then, there exist two matrices U and V such that 

(9) FA = UF © VC , 

and for any choice of these matrices, if we define z(k) := Fx(k), we have 

(10) z(k + 1) = Uz{k) © Vy{k) for k > , 

where {x(k)} k>0 is any trajectory of system ([T]) and {y(k)} k>0 is the corresponding 
output trajectory. 

Proof. By Theorem [2] we know that W T is {A*, C')-controlled invariant and thus 

A t (W T ) C W T ©ImC* . 
Since W T = Im F l by Lemma [71 we deduce that 

A t p t = ptjjt 9 (jtyt 

for some matrices U and V. After transposing, we obtain Since V C ker F, we 
have z(k + 1) = Fx(k + 1) = FAx(k), and using ([9]), we get 

FAx(k) = UFx(k) © VCx(k) = Uz(k) © Vy(k) , 

which shows (ITU1). □ 



Remark 3. Suppose that, given a matrix G, we want to construct an observer for 
reconstructing, from the observation and initial condition, the linear functional of 
the state of system ([1]) 

w(k) = Gx(k) , 

where k > 0. With this aim, assume that the minimal (C, A)-conditioned invariant 
congruence containing V is contained in kerG and cofinitely generated, so that 
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V*(C, A) = kcr F C kerG for some matrix F. Then, if we define z{k) := Fx(k) 
like in Theorem 0J we have w{k) = G(—F t )z(k) for all k > 0, where the product 
by — F f is performed in the semiring (R U {— oo, +00}, min, +) with the convention 
(+00) + a = +00 for all a G R U {—00, +00}. As a matter of fact, from the equality 
F(-F*)F = F (sec for example |BCOQ92[ [BJ72]), it follows that 

F(-F*)z(/s) = F(—F t )Fx(k) = Fx(k) , 

and since kerF C kerG, we get G(—F t )z(k) — Gx(k) = w(k). 

Therefore, by Theorem^ we conclude that it is possible to effectively reconstruct 
the linear functional of the state w(k) = Gx(k) from the observation and initial state 
if the minimal (C, ^-conditioned invariant congruence containing V is contained 
in kerG and cofinitely generated. 

6. Application to a manufacturing system 

Dynamical systems of the form (TTJ) can be used, for instance, to model max-plus 
linear dynamical systems of the form 

x(k + 1) = Ax(k) , 

where some entries of A are unknown but belong to certain intervals, at the price of 
adding new variables. To see this, assume for example that in the max-plus linear 
dynamical system 

'xi(k + lj\ = f an ai 2 Wxi(fc) N 
K x 2 (k + I) J \a 2 i (k) a 2 2 J \x 2 (fc), 

0,21 (/c) can take any value in the interval [a, 6] for each k G N, but an, 012 and 022 
are fixed. Consider the "extended state" vector x(k) = {xi{k),X2{k),x^{k)^Xi(k)) 
and define 



(11) 



(an ai2 



A 



e 

an 



a22 
ai2 



\an au 



e 
a 
e 

e ej 



and E = 




Then, as 



Ax(k) 



( anxi(k) Q) ai2X 2 (k) \ 
a 2 2X2(k) ax 3 (k) (B bx^k) 
anXi(k) © a 12 x 2 (k) 
a-nXx{k) © ai 2 x 2 (k) 



we have 
Ex{k^ 
Since 



1) = EAx{k) 



xi(k + 1) = auxi(k) © ai 2 x 2 (k) 

x 2 {k + 1) = a 2 2X2(k) © ax 3 (k) © bxi(k) 

x 3 (k + 1) © X4(k + 1) = a 11 xi(k) © ai2X 2 (k) 



x 3 (k + 1) © Xi{k + 1) = a n xi(k) © a 12 X2{k) = x\{k + 1) 
it follows that 

ax 3 (k + 1) ©6x 4 (fc + 1) = a 2 i{k + l)xi{k + I) 

for some a2i(fc + 1) G [a, b]. Thus, if we assume that the initial state x(0) satisfies 
the condition 0:3(0) © £4(0) = xi(0), for all k > we have 

X2(k + 1) = a22X2(k) © ax 3 (k) © bx4(k) = a,22X2(k) © a,2i(k)xi(k) 
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Figure 1. A manufacturing system (flow-shop) 



for some 021 (k) G [a,b]. Therefore, the first two entries of the state vector of the 
dynamical system 

Ex(k + 1) = EAx(k) 
describe the evolution of system (JTTJ) , in the sense that they are equal to the state 
vector of system (fTT|) corresponding to some choice of 021 (k) in [a, b] for each k G N, 
and vice versa. 

This idea can be generalized to the case of more than one uncertain holding 
time by adding two auxiliary variables for each of them. In particular, this method 
can be used to model manufacturing systems and transportation networks in which 
some (processing or traveling) times are unknown but bounded. When applying it, 
in order to satisfy the previous condition on the initial state of the extended state 
vector, for simplicity we will assume that Xj(0) = for all i. 

As an example, consider the Timed Event Graph of Figure [1] This figure rep- 
resents a manufacturing system (flow-shop) composed of three machines, denoted 
by Mi, M 2 and M 3 , which is supposed to produce three kinds of parts, denoted by 
Pi , P-2 and P3 (we refer the reader to |BCOQ92] for background on the modeling of 
Timed Event Graphs using max-plus algebra). We assume that each machine pro- 
cesses each part exactly once, that all parts follow the same sequence of machines: 
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Mi , Mi and finally M3 , and that the sequencing of part types on each machine is 
the same: Pi, P2 and finally P3. Parts are carried on pallets form one machine to 
the next one. When a part has been processed by the three machines, it is removed 
from the pallet, which returns to the staring point for a new part. 

In Figure [TJ each of the nine transitions corresponds to a combination of a 
machine and a part type. For instance, the transition labeled xg corresponds to 
the combination of machine M2 processing part P3 . To each transition corresponds 
a variable xt(k) which denotes the earliest time at which the transition can be 
fired for k-th time, that is, the earliest time at which a specific machine can start 
processing a specific part type for k-th time. 

Places between transitions express the precedence constrains between operations 
due to the sequencing of operations on the machines. For instance, x e depends 
on £3, which corresponds to Mi processing P 3 , and on x$, which corresponds to 
M% processing P2. The holding time assigned to each place is determined, for 
instance, as a function of some or all of the following variables: the processing time 
of machines on parts, the transportation time between machines and the set up 
time on machines when switching from one part type to another. These times are 
given in Figure[TJ Note that the times x\ — > X2, £2 — ► £5 and X4 — > x§ are not fixed 
but are assumed to belong to the intervals [1,7], [3,5] and [1,3] respectively. This 
variation could be due, for instance, to possible breakdowns. All the other times 
are supposed to be fixed. 

For simplicity, we assume that in the initial state there is a token in each place. 
This physically means that each machine can process at most three parts at the 
same time, and that there are three pallets carrying each part type. 

The evolution of this flow-shop can be described by a max-plus linear dynamical 
system of the form x(k + 1) = Ax(k), where x(k) G E^ ax is the vector of fc-th firing 
times of the nine transitions and Ay is the holding time of the place in the arc that 
goes from Xj to Xi (Ay = e if there is no such an arc, see |BCOQ92] for details). 
Due to the presence of uncertain holding times, three entries of A may vary with 
k, so we next use the method described above to model this system. After adding 
six auxiliary variables Xi, i = 10, . . . , 15 (two for each uncertain holding time), the 
evolution of the flow-shop of Figure [1] can be described by the following dynamical 



system 
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Now, assume that we observe the firing times of transitions £3, xq and xs, that 
is, we define y(k) — Cx(k) 1 where 

(££0££££££££££££ 
£££££0£££££££££ 
£££££££0£££££££ 

Note that these times have a physical meaning. For instance, x$ represents the 
time at which M3 starts processing P^- 

Taking into account Theorem [3l in order to determine if there exists a minimal 
cofinitely generated (C, j4)-conditioncd invariant congruence Vf g (C, ^4) containing 
V = kcrE, in the first place we compute the maximal (A*, C*)-controlled invariant 
scmimodule /C*(j4*,C 4 ) contained in K, = V T = Im£ f . With this aim, we apply 
Proposition [3] and compute the sequence of semimodulcs 

(13) X l = K, and X k+1 = <p(X k ) for keN , 
where 

(14) (j>{X) = Kr\{A t )- 1 {X@lm.C t ) . 

This can be done with the help of the max-plus toolbox of Scilab. To be more 
precise, this is performed expressing the intersection and inverse image of finitely 
generated semimodules as the solution sets of appropriate homogeneous max-plus 
linear systems of equations (see [Gau98 ), and by solving these systems using the 
function mpsolve of this toolbox (see [AGG08] for a discussion of the complexity of 
the algorithm involved). 

In this way, we obtain X4 = X3 ^ ^2 S± X\ and thus /C*(j4', C*) = A3, where A3 
is the semimodule generated by the rows of the following matrix 

/ 



£ 
£ 
£ 
£ 

J 



Therefore, by Theorem [3] we conclude that Vf g (A,C) 
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ker F. 
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Figure 2. Random holding times and the corresponding output trajectory 



By Theorem @] we know that it is possible to reconstruct the functional of the 
state z(k) := Fx(k) in terms of the initial condition x(0) and the observations 
y(0), . . . , y(m — 1). More precisely, we have the following dynamic observer allowing 
us to compute z(k): 

z(k + l) = Uz{k)®Vy{k) 
2(0) = Fx(0) 



(15) 



where 



U 



J 



and V = 
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The matrices J7 and V are obtained by solving the equation FA = UF © VC (this 
kind of one sided max-plus linear systems of equations can be efficiently solved with 
the help of rcsiduation theory see [BJ721 [BCUQ921 IGau98| ICG79] ) . Observe that, 
due to the form of F, this in particular means that we can determine xi {m), £4(771), 
xj{m) and xg(m) in terms of the initial condition and the observations. 

In Figure [5] we represented the output trajectory (corresponding to the initial 
condition ajj(O) = 0, for i = 1, ... ,9) of the usual description, that is through a 
max-plus linear dynamical system of the form 

x(k + 1) = Ax{k) 
y(k) = Cx(k) 
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x-j{k) = zs(k) 
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Figure 3. The (exact) state trajectory reconstructed by the observer 



of the flow-shop of Figure [TJ when the uncertain holding times take the values 
given on the upper left-hand side of Figure [2j These times have been generated at 
random, in their respective intervals, using Scilab. With this output trajectory and 
the initial condition, we computed the sequence {z(k)} keN given by the dynamic 
observer (|15j) . In particular, in Figure [3] we represented the sequence {z3(fc)} fegN 
which is equal to the sequence {x7(k)} kl - K of firing times of the seventh transition 
X7 because Z3 (k) = xjik) by the form of F. 

Indeed, it is possible to directly check the dynamic observer (fT5|) . Assume that 
z(k) = Fx(k). Then, for instance, by (| 1 5[) we have 

z 3 (k + 1) = 4z 2 (fc) © 3z 4 (fc) = 4x 4 {k) ® 3x 9 {k) , 

because Z2(k) = x 4 {k) and 2:4 (k) = xg(k), and by (|12p we know that 

x 7 {k + 1) = 4x 4 (fc) © 3x 9 (k) . 

Therefore, z 3 (k + 1) = x 7 (k + 1). 

Let us finally mention that Timed Event Graphs in which the number of initial 
tokens and holding times are only known to belong to certain intervals have been 
considered in |LHCJ 04j. This work addresses the existence and computation of a 
robust control set in order to guarantee that the output of the controlled system is 
contained in a set of reference outputs. In contrast to the present paper, it is based 
on interval analysis in dioids, residuation theory and transfer series methods, and 
does not address any observation problem. 
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